Lucene search
+L

11 matches found

NVD
NVD
•added 2026/10/13 10:17 a.m.•12 views

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS0.00151EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 9:18 a.m.•23 views

CVE-2026-85115

A vulnerability exists in the .NET Client Library for SIMATIC S7 Webserver API (all versions

6.8CVSS5.7AI score0.00151EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•17 views

CVE-2026-85115: Generation of Error Message Containing Sensitive Information

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

6.8CVSS5.7AI score0.00151EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-111392

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 Description Applications using the library do not properly redact PLC restore passwords from HTTP error exception messages. An attacker with access to logs or diagnosti...

6.8CVSS5.8AI score0.00151EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/20 5:48 p.m.•34 views

CVE-2025-47901 RCE on restore configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

8.9CVSS0.0138EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•447 views

Netlogon Weak Cryptographic Authentication

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'windowserror' class MetasploitModule 'Netlogon Weak Cryptographic Authentication', 'Description' = %q A vulnerability exists within the Netlogon authentication...

10CVSS7.5AI score0.99389EPSS
SaveExploits79
attackerkb
attackerkb
•added 2021/04/13 9:15 p.m.•12 views

CVE-2021-3473

An internal product security audit of Lenovo XClarity Controller XCC discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer if Lenovo XClarity Administrator LXCA is used to perform the backup/restore. The backup/restore password typically exists...

4.9CVSS6AI score0.00478EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/04/13 8:41 p.m.•45 views

CVE-2021-3473

An internal product security audit of Lenovo XClarity Controller XCC discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer if Lenovo XClarity Administrator LXCA is used to perform the backup/restore. The backup/restore password typically exists...

4.5CVSS5.6AI score0.00478EPSS
SaveExploits0References1
Lenovo
Lenovo
•added 2021/04/13 1:30 p.m.•48 views

Lenovo XClarity Controller (XCC) Information Disclosure Vulnerability - Lenovo Support US

No description provided...

4.9CVSS5.1AI score0.00478EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•25 views

Lenovo XClarity Controller security vulnerabilities

Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo China that is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller that stems from. An internal product security audit of Lenovo XCC Lenovo...

4.9CVSS5.7AI score0.00478EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2018/02/20 2:11 p.m.•15 views

dashboard.marketgid.com XSS vulnerability

Open Bug Bounty ID: OBB-564127 Description| Value ---|--- Affected Website:| dashboard.marketgid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Rows per page
Query Builder